ByteOS Network

NVD Vulnerability Details :

CVE-2018-1095

Modified

Source-secalert@redhat.com

Published At-02 Apr, 2018 | 03:29

Updated At-13 Feb, 2023 | 04:53

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary	2.0	7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions up to 4.15.15(inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://openwall.com/lists/oss-security/2018/03/29/1	secalert@redhat.com	Mailing List
https://access.redhat.com/errata/RHSA-2018:2948	secalert@redhat.com	N/A
https://bugzilla.kernel.org/show_bug.cgi?id=199185	secalert@redhat.com	Exploit Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1560793	secalert@redhat.com	Issue Tracking
https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=ce3fd194fcc6fbdc00ce095a852f22df97baa401	secalert@redhat.com	Patch
https://usn.ubuntu.com/3695-1/	secalert@redhat.com	N/A
https://usn.ubuntu.com/3695-2/	secalert@redhat.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History